Adding login_hint in SAML request

[selvakumar-invicara]

Im using keycloak as saml idp and my Spring Boot application as Service provider.

I would like pass login_hint in query parameter for saml request. I understand that it works for open-id-connect. But it doesn’t work for saml request.

Please help

[xgp]

You can use the <saml:Subject> field in the AuthnRequest message.

[selvakumar-invicara]

@xgp

AuthnRequest

Thank you very much, It works

[Cyben]

There is another solution for that.

Look at:

Using kc_idp_hint to skip default idp with SAML?

I’m trying to use kc_idp_hint to skip the default identity provider for some users as explained here. Concretely, my scenario matches this: The kc_idp_hint query parameter also allows the client to override the default identity provider if one is configured for the Identity Provider Redirector authenticator. The client can also disable the automatic redirecting by setting the kc_idp_hint query parameter to an empty value. My client is connected to Keycloak via SAML but the documentation ment…

And from my experience it works, but I haven’t tested it on newer versions of Keycloak.

[selvakumar-invicara]

@xgp Is it possible to render sign up page instead of login page. The flow works like this,

1. End user lands on Service provider
2. It renders a page to user to enter the email
3. Redirect to keycloak upon submitting
4. Keycloak renders login page

At fourth step, Is it possible to control to render registration page instead of login page?